topic Re: Roaming between controllers without mobility group config in Wireless

Roaming between controllers without mobility group config

Kris83 — Fri, 25 Feb 2022 12:00:23 GMT

Hi,

I have 2 x 8450 controllers. IOS verion of both is 8.5.151.0 and they are on a different subnets. One in Europe and one in US with no mobility group created between them.

I'm on site A where a few APs are associated with WLC in US and few APs are associated with EU controller. This is just a temp solution to test roaming. All APs are configured with the same flexconnect group and using the same WLANs. Fast transition is set to 'Adaptive'.

I'm able to roam seamlessly between APs. I was sure the mobility group must be created so the clients can roam between 2 different controllers but this is not the case. Can someone please explain how roaming is working without mobility groups?

Thank you.

Re: Roaming between controllers without mobility group config

Scott Fella — Fri, 25 Feb 2022 12:11:13 GMT

You should read up in mobility groups. That would reference what mobility groups does when controllers are added to the same group. Make sure you are using 802.1x and then run a debug on the client while also looking at the logs on the radius server. See if you see a difference between when mobility group is enabled and disabled. That can help you see if there is a difference or not. Also keep in mind that RF groups help with RRM when there are multiple controllers in an environment.

Re: Roaming between controllers without mobility group config

Flavio Miranda — Fri, 25 Feb 2022 12:32:57 GMT

Are they roaming or are they fastly disconnecting and re-connecting on the other WLC? If you run a ping command and walk through the area, how many packets does it loss?

You are correct. If WLC is not added to the other Mobility group, they will not exchange clients information, therefore, roaming should not occour.

Re: Roaming between controllers without mobility group config

Kris83 — Fri, 25 Feb 2022 13:34:51 GMT

Hi Flavio,

First of all thank you for your reply. When I walk around with a continuous ping running I'm loosing 1 ping. Perhaps you're right. Maybe i'm not roaming but quickly disconnecting and re-connecting on the other WLC.

I'm going to do some packet capture so hopefully I'll be able to see what's going on.

Re: Roaming between controllers without mobility group config

Flavio Miranda — Fri, 25 Feb 2022 14:09:49 GMT

Thats correct. To make sense to me, according to cisco docs, without Mobility Group, there should be no Roaming .

But, with 802.1x or even PSK and network profile saved on the client, it is perfect possible to move realy smoothly.

If you have Prime, it is easy to see where clients has been.

On the wireless wlc, you can run:

show client roam-history client_mac

Re: Roaming between controllers without mobility group config

Kris83 — Fri, 25 Feb 2022 17:19:12 GMT

Thank you Scott. I'll do another test Monday and I'll keep an eye on a radius server to see if I'm re-authenticating. Cheers 🙂

Re: Roaming between controllers without mobility group config

Scott Fella — Fri, 25 Feb 2022 17:37:28 GMT

Keep in mind also, if you plan to keep your implementation like how you have it, you are better off defining the primary and secondary controllers on each ap high availability section. How you have it now, is not ideal at all. Open and PSK would be seamless in a way if you are just doing ping, but 802.1x would cause you issues, or should at least.

Re: Roaming between controllers without mobility group config

Kris83 — Fri, 25 Feb 2022 17:52:20 GMT

Sure Scott, this is just a temporary solution. Down the road I'm going to have all APs in Europe on EU controller.

Thanks for your input and help. Appreciate it.

Re: Roaming between controllers without mobility group config

Scott Fella — Fri, 25 Feb 2022 20:04:21 GMT

Okay sounds good. As far as roaming between controller that are not in the same mobility group, it would be like roaming between two different systems with the same SSID and authentication.

Re: Roaming between controllers without mobility group config

Kris83 — Fri, 04 Mar 2022 10:57:03 GMT

Hi,

after doing some more investigation I wasn't roaming between 2 controllers and as Flavio and Scott mentioned I was re-authenticating really quickly. After adding mobility group between two controllers I didn't see any re-authenticating in radius server anymore and I could see 'Mobility move count' for my client increasing. Thank you all for your input. I appreciate your help.

Re: Roaming between controllers without mobility group config

Scott Fella — Fri, 04 Mar 2022 16:01:46 GMT

Glad you ironed all that out.